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ABSTRACT 


According to the invention, the compiled packet filter code is managed in a 
plurality of pieces, not as a single unit as according to prior art. Preferably, the 
compiled packet filter code is managed in equally sized pages. When a filter rule is 
changed, added or removed, only the affected page or pages are changed, added or 
deleted. This allows for fast updates of the filter code. 
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